"Ransomware Predictions in 2023: More Government Action and a Pivot to Data Extortion"
In 2022, there were thousands of ransomware attacks, ranging from breaches that targeted the military to incidents that brought entire governments to a halt. Ransomware groups such as Conti ceased operations, while LockBit and Hive attacked thousands of hospitals, governments, businesses, and schools worldwide. The Record asked analysts about their expectations for 2023. Brett Callow, an Emsisoft security expert, told The Record that ransomware trends this year may resemble those observed in 2022. However, he highlighted that governments might continue to increase their anti-ransomware efforts, as regulations impact the ransomware landscape just as much as hackers. For instance, state or national laws on ransom payments may shift attacks to other jurisdictions. A country's offensive acts may have a comparable consequence. Callow stated that measures against larger Ransomware-as-a-Service (RaaS) operations may result in the development of smaller, disposable brands. Allan Liska, a ransomware expert, agreed with Callow's prediction, stating that more governments will likely intensify their efforts to combat ransomware in 2023. Alongside mandated reporting regulations, initiatives, including the Ransomware Task Force and state laws to prevent ransomware payments, will continue to be promoted. Some experts expect more severe reactions from law enforcement authorities, which have boosted their efforts to destroy ransomware gangs. Mark Vaitzman of Deep Instinct stated that numerous threat organizations, including LockBit in Canada, Zeus in Geneva, and REvil in Russia, were adversely affected by the arrests of gang members. Threat actors pose a significant risk to financial security, national security, and even human life, he said. Therefore, these arrests will likely increase in frequency in 2023. The FBI and other agencies are offering millions of dollars in exchange for information about these cybercriminals. This article continues to discuss experts' predictions for ransomware in 2023.